EasyAdminBundle
Easycorp · 2 CVEs
CVE-2026-54087
HIGH
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
Sep 14, 2026
CVE-2026-81892
HIGH
EasyAdmin custom-action dispatcher bypasses access_control on other routes
Aug 31, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-54087 | EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField | HIGH | 0.40% | Sep 14, 2026 |
| CVE-2026-81892 | EasyAdmin custom-action dispatcher bypasses access_control on other routes | HIGH | 0.45% | Aug 31, 2026 |
Showing 1 to 2 of 2 CVEs